| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 167.172.188.177 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-07 | 2026-08-13 |
| 45.203.220.93 | 80 | C2 | ValleyRAT | — | — | SC | AS140869 | 2026-08-07 | — |
| 45.203.220.93 | 6668 | C2 | ValleyRAT | — | — | SC | AS140869 | 2026-08-07 | — |
| 45.203.220.93 | 8886 | C2 | ValleyRAT | — | — | SC | AS140869 | 2026-08-07 | — |
| 161.35.48.40 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-07 | 2026-08-13 |
| 165.154.236.119 | 14333 | C2 | Unknown | — | — | SG | AS142002 | 2026-08-07 | — |
| 137.220.155.75 | 6667 | C2 | ValleyRAT | — | — | SG | AS4907 | 2026-08-07 | — |
| 202.60.229.104 | 6000 | C2 | XenoRAT | — | — | HK | AS136501 | 2026-08-07 | — |
| 196.251.107.252 | 22061 | C2 | Remcos | — | — | SC | AS214351 | 2026-08-07 | — |
| 165.245.178.39 | 8443 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-07 | 2026-08-13 |
| 103.251.113.127 | 8085 | C2 | VShell | — | — | HK | AS133380 | 2026-08-07 | — |
| 43.138.116.60 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-07 | — |
| 43.138.116.60 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-07 | — |
| 43.138.116.60 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-07 | — |
| 43.138.116.60 | 22 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-07 | — |
| 46.151.182.225 | 7007 | C2 | XWorm | — | — | NL | AS205759 | 2026-08-07 | — |
| 161.35.48.40 | 8080 | C2 | Aisuru | — | — | US | AS14061 | 2026-08-07 | — |
| 193.29.58.172 | 465 | C2 | Remcos | — | — | AU | AS48314 | 2026-08-07 | — |
| 45.148.18.40 | 58798 | C2 | XWorm | — | — | SE | AS42675 | 2026-08-07 | — |
| 45.148.18.40 | 58268 | C2 | XWorm | — | — | SE | AS42675 | 2026-08-07 | — |
| 190.255.83.163 | 6001 | C2 | Quasar RAT | — | — | CO | AS3816 | 2026-08-07 | — |
| 43.139.87.203 | 8888 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-07 | — |
| 43.139.87.203 | 8080 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-07 | — |
| 185.215.151.16 | 8823 | C2 | XWorm | — | — | CA | AS135392 | 2026-08-07 | — |
| 193.26.115.17 | 56003 | C2 | PureRAT | — | — | NL | AS210558 | 2026-08-07 | — |
| 193.26.115.17 | 56002 | C2 | PureRAT | — | — | NL | AS210558 | 2026-08-07 | — |
| 193.26.115.17 | 56001 | C2 | PureRAT | — | — | NL | AS210558 | 2026-08-07 | — |
| 43.139.87.203 | 80 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-07 | — |
| 43.139.87.203 | 443 | C2 | Cobalt Strike | — | — | CN | AS45090 | 2026-08-07 | 2026-08-13 |
| 203.98.68.17 | 8888 | C2 | AsyncRAT | — | — | IN | AS215117 | 2026-08-07 | — |
| 203.98.68.17 | 8808 | C2 | AsyncRAT | — | — | IN | AS215117 | 2026-08-07 | — |
| 114.67.204.86 | 443 | C2 | Cobalt Strike | — | — | CN | AS58466 | 2026-08-07 | — |
| 136.244.104.161 | 3334 | C2 | Unknown | — | — | US | AS20473 | 2026-08-07 | — |
| 136.244.104.161 | 3333 | C2 | Unknown | — | — | US | AS20473 | 2026-08-07 | — |
| 85.209.87.84 | 56002 | C2 | PureRAT | — | — | CA | AS64236 | 2026-08-07 | 2026-08-13 |
| 78.17.71.8 | 5025 | C2 | DCRat | — | — | AE | AS212477 | 2026-08-07 | 2026-08-13 |
| 64.89.161.196 | 7777 | C2 | DCRat | — | — | US | AS205759 | 2026-08-07 | 2026-08-13 |
| 45.89.48.12 | 443 | C2 | PureRAT | — | — | US | AS6206 | 2026-08-07 | 2026-08-13 |
| 34.106.101.107 | 6606 | C2 | AsyncRAT | — | — | US | AS396982 | 2026-08-07 | 2026-08-13 |
| 3.75.210.48 | 7777 | C2 | DeimosC2 | — | — | US | AS16509 | 2026-08-07 | 2026-08-13 |
| 207.32.217.227 | 21903 | C2 | AsyncRAT | — | — | US | AS14315 | 2026-08-07 | 2026-08-13 |
| 203.98.68.17 | 1009 | C2 | AsyncRAT | — | — | IN | AS215117 | 2026-08-07 | 2026-08-13 |
| 185.212.129.152 | 9000 | C2 | Evilginx | — | — | VG | AS200313 | 2026-08-07 | 2026-08-13 |
| 185.212.128.170 | 9000 | C2 | Evilginx | — | — | VG | AS200313 | 2026-08-07 | 2026-08-13 |
| 159.203.69.210 | 35203 | C2 | AsyncRAT | — | — | US | AS14061 | 2026-08-07 | 2026-08-13 |
| 154.40.62.125 | 9001 | C2 | pupy | — | — | US | AS147003 | 2026-08-07 | 2026-08-13 |
| 154.30.132.30 | 6606 | C2 | AsyncRAT | — | — | US | AS395111 | 2026-08-07 | 2026-08-13 |
| 124.198.131.169 | 443 | C2 | PureRAT | — | — | NL | AS210558 | 2026-08-07 | 2026-08-13 |
| 103.249.116.184 | 443 | C2 | PureRAT | — | — | VN | AS151852 | 2026-08-07 | 2026-08-13 |
| 85.31.60.169 | 2535 | C2 | Remus | — | — | ES | AS47583 | 2026-08-07 | 2026-08-07 |